CVE-2025-54769: Xorux LPAR2RRD

High severity, CVSS 8.8. EPSS: 3.3% chance of exploitation in the next 30 days.

An authenticated, read-only user can upload a file and perform a directory traversal to have the uploaded file placed in a location of their choosing. This can be used to overwrite existing PERL modules within the application to achieve remote code execution (RCE) by an attacker.

Affected products

• Xorux LPAR2RRD: up to and including 8.04

Published 2025-07-29. Last modified 2026-06-17.